Hey there,
Would it be possible to run this with the debug version (as described here) so that we could get more detailed logs on what’s going on here, as well as get the resolved callstack (UBA should be attempting to resolve it via collected stack pointers, and PDBs).
We haven’t tested against this Windows 11 Update just yet (just spoke with the domain SME), so we can give it a whirl on our end as well.
Kind regards,
Julian